chore: Update manifests after automerge

2026-04-13 20:40:39 +00:00
parent 0e7d4e70dc
commit 9bbef4d8e0
179 changed files with 277 additions and 201 deletions
--- a/clusters/cl01tl/manifests/authentik/ConfigMap-authentik-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/authentik/ConfigMap-authentik-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: authentik-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/PodMonitor-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/PodMonitor-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/PrometheusRule-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: authentik-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: authentik-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: authentik-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/Service-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/Service-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceAccount-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/ServiceMonitor-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/authentik/StatefulSet-authentik-valkey.yaml
+++ b/clusters/cl01tl/manifests/authentik/StatefulSet-authentik-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: authentik-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: authentik
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: authentik
      annotations:
-        checksum/initconfig: "07891dc8f81b4fb3516e2993c6e827b1"
+        checksum/initconfig: "5891897632e2eabc8b0c61cc49fea0f6"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: authentik-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: authentik-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/blocky/ConfigMap-blocky-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/blocky/ConfigMap-blocky-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: blocky-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/PodMonitor-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/PodMonitor-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/PrometheusRule-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/PrometheusRule-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: blocky-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: blocky-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: blocky-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/Service-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/Service-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/ServiceAccount-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/ServiceAccount-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/ServiceMonitor-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/ServiceMonitor-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/blocky/StatefulSet-blocky-valkey.yaml
+++ b/clusters/cl01tl/manifests/blocky/StatefulSet-blocky-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: blocky-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: blocky
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: blocky
      annotations:
-        checksum/initconfig: "b997c0967aeeee370412add1d41691a1"
+        checksum/initconfig: "ce6e499ac7fd3ad6706c10e5616c511c"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: blocky-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: blocky-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/dawarich/ConfigMap-dawarich-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ConfigMap-dawarich-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: dawarich-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/PodMonitor-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/PodMonitor-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/PrometheusRule-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/PrometheusRule-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: dawarich-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: dawarich-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: dawarich-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/Service-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/ServiceAccount-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ServiceAccount-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/ServiceMonitor-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/dawarich/StatefulSet-dawarich-valkey.yaml
+++ b/clusters/cl01tl/manifests/dawarich/StatefulSet-dawarich-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: dawarich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: dawarich
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: dawarich
      annotations:
-        checksum/initconfig: "b1e9c56c9439a06e231c05897dbd90b9"
+        checksum/initconfig: "53d07c776effa0dea3178b0b46d98f22"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: dawarich-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: dawarich-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/directus/ConfigMap-directus-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/directus/ConfigMap-directus-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: directus-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/directus/Pod-directus-valkey-test-auth-existing.yaml
+++ b/clusters/cl01tl/manifests/directus/Pod-directus-valkey-test-auth-existing.yaml
@@ -3,7 +3,7 @@ kind: Pod
 metadata:
  name: directus-valkey-test-auth-existing
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
@@ -15,7 +15,7 @@ spec:
  restartPolicy: Never
  containers:
    - name: test-auth
-      image: "valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9"
+      image: "docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9"
      command:
        - sh
        - -c
--- a/clusters/cl01tl/manifests/directus/Service-directus-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/directus/Service-directus-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: directus-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/directus/Service-directus-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/directus/Service-directus-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: directus-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/directus/Service-directus-valkey.yaml
+++ b/clusters/cl01tl/manifests/directus/Service-directus-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: directus-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/directus/ServiceAccount-directus-valkey.yaml
+++ b/clusters/cl01tl/manifests/directus/ServiceAccount-directus-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: directus-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/directus/StatefulSet-directus-valkey.yaml
+++ b/clusters/cl01tl/manifests/directus/StatefulSet-directus-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: directus-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: directus
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: directus
      annotations:
-        checksum/initconfig: "6307ecb287c2f05dc09ba3cf7cdfd155"
+        checksum/initconfig: "f2c110c848eac7a2ffdbe72ea52f43de"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: directus-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: directus-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -74,6 +77,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: gitea-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-renovate-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/gitea/ConfigMap-gitea-valkey-renovate-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: gitea-valkey-renovate-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Deployment-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/Deployment-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: Deployment
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
@@ -22,7 +22,7 @@ spec:
        app.kubernetes.io/name: valkey-renovate
        app.kubernetes.io/instance: gitea
      annotations:
-        checksum/initconfig: f77fc408ed818f9e2bd789f0e95a4172
+        checksum/initconfig: 94157ae544275da50867d4d0da0722fc
    spec:
      automountServiceAccountToken: false
      serviceAccountName: gitea-valkey-renovate
@@ -30,11 +30,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: gitea-valkey-renovate-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -54,6 +57,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/PersistentVolumeClaim-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: PersistentVolumeClaim
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/PodMonitor-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/PrometheusRule-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate-metrics.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey-renovate-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/Service-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/Service-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceAccount-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey-renovate.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey-renovate.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: gitea-valkey-renovate
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-renovate
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/ServiceMonitor-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-valkey.yaml
+++ b/clusters/cl01tl/manifests/gitea/StatefulSet-gitea-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: gitea-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: gitea
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: gitea
      annotations:
-        checksum/initconfig: "b82939dee80151a39606083af0d5422a"
+        checksum/initconfig: "9bf6424ee2956d21b52e5c3831aecefa"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: gitea-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: gitea-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-remote-cache-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-remote-cache-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: grafana-operator-valkey-remote-cache-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-unified-alerting-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ConfigMap-grafana-operator-valkey-unified-alerting-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: grafana-operator-valkey-unified-alerting-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Deployment-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Deployment-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: Deployment
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
@@ -22,7 +22,7 @@ spec:
        app.kubernetes.io/name: valkey-remote-cache
        app.kubernetes.io/instance: grafana-operator
      annotations:
-        checksum/initconfig: d790dfe3185267fe6c217c9572cfa9fb
+        checksum/initconfig: 03f75947107472ad2dcec0779776b688
    spec:
      automountServiceAccountToken: false
      serviceAccountName: grafana-operator-valkey-remote-cache
@@ -30,11 +30,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: grafana-operator-valkey-remote-cache-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -54,6 +57,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/grafana-operator/PersistentVolumeClaim-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/PersistentVolumeClaim-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: PersistentVolumeClaim
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/PodMonitor-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/PrometheusRule-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache-metrics.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-remote-cache-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-headless.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-unified-alerting-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-metrics.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-unified-alerting-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-read.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-unified-alerting-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/Service-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ServiceAccount-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-remote-cache.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-remote-cache.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: grafana-operator-valkey-remote-cache
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-remote-cache
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/ServiceMonitor-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/grafana-operator/StatefulSet-grafana-operator-valkey-unified-alerting.yaml
+++ b/clusters/cl01tl/manifests/grafana-operator/StatefulSet-grafana-operator-valkey-unified-alerting.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: grafana-operator-valkey-unified-alerting
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey-unified-alerting
    app.kubernetes.io/instance: grafana-operator
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey-unified-alerting
        app.kubernetes.io/instance: grafana-operator
      annotations:
-        checksum/initconfig: "cc97af05b1fa8109e641f83996efbf01"
+        checksum/initconfig: "f2c07fdbfee73b9f6c6172633a43e334"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: grafana-operator-valkey-unified-alerting
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: grafana-operator-valkey-unified-alerting-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/harbor/ConfigMap-harbor-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/harbor/ConfigMap-harbor-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: harbor-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/PodMonitor-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/PodMonitor-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/PrometheusRule-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/PrometheusRule-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: harbor-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: harbor-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/harbor/Service-harbor-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: harbor-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/Service-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/Service-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/ServiceAccount-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/ServiceAccount-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/ServiceMonitor-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/ServiceMonitor-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/harbor/StatefulSet-harbor-valkey.yaml
+++ b/clusters/cl01tl/manifests/harbor/StatefulSet-harbor-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: harbor-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: harbor
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: harbor
      annotations:
-        checksum/initconfig: "0cad4b394241164de6b4d658a977be16"
+        checksum/initconfig: "30d64a67a8ff4d8b0ca948233a5563e0"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: harbor-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: harbor-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/immich/ConfigMap-immich-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/immich/ConfigMap-immich-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: immich-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/PodMonitor-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/PodMonitor-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/PrometheusRule-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/PrometheusRule-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/Service-immich-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/immich/Service-immich-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: immich-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/Service-immich-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/immich/Service-immich-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: immich-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/Service-immich-valkey-read.yaml
+++ b/clusters/cl01tl/manifests/immich/Service-immich-valkey-read.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: immich-valkey-read
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/Service-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/Service-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/ServiceAccount-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/ServiceAccount-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceAccount
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/ServiceMonitor-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/ServiceMonitor-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: ServiceMonitor
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/immich/StatefulSet-immich-valkey.yaml
+++ b/clusters/cl01tl/manifests/immich/StatefulSet-immich-valkey.yaml
@@ -3,7 +3,7 @@ kind: StatefulSet
 metadata:
  name: immich-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: immich
    app.kubernetes.io/version: "9.0.3"
@@ -32,7 +32,7 @@ spec:
        app.kubernetes.io/name: valkey
        app.kubernetes.io/instance: immich
      annotations:
-        checksum/initconfig: "56fd0449d1eea259ddd955cd82dc8344"
+        checksum/initconfig: "2d8432be19db9efa32b993becf4e58d4"
    spec:
      automountServiceAccountToken: false
      serviceAccountName: immich-valkey
@@ -40,11 +40,14 @@ spec:
        fsGroup: 1000
        runAsGroup: 1000
        runAsUser: 1000
+        seccompProfile:
+          type: RuntimeDefault
      initContainers:
        - name: immich-valkey-init
          image: docker.io/valkey/valkey:9.0.3@sha256:3b55fbaa0cd93cf0d9d961f405e4dfcc70efe325e2d84da207a0a8e6d8fde4f9
          imagePullPolicy: IfNotPresent
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
@@ -69,6 +72,7 @@ spec:
          command: ["valkey-server"]
          args: ["/data/conf/valkey.conf"]
          securityContext:
+            allowPrivilegeEscalation: false
            capabilities:
              drop:
                - ALL
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/ConfigMap-kube-prometheus-stack-valkey-init-scripts.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/ConfigMap-kube-prometheus-stack-valkey-init-scripts.yaml
@@ -3,7 +3,7 @@ kind: ConfigMap
 metadata:
  name: kube-prometheus-stack-valkey-init-scripts
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/PodMonitor-kube-prometheus-stack-valkey.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/PodMonitor-kube-prometheus-stack-valkey.yaml
@@ -3,7 +3,7 @@ kind: PodMonitor
 metadata:
  name: kube-prometheus-stack-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/PrometheusRule-kube-prometheus-stack-valkey.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/PrometheusRule-kube-prometheus-stack-valkey.yaml
@@ -3,7 +3,7 @@ kind: PrometheusRule
 metadata:
  name: kube-prometheus-stack-valkey
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-headless.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-headless.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: kube-prometheus-stack-valkey-headless
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/version: "9.0.3"
--- a/clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-metrics.yaml
+++ b/clusters/cl01tl/manifests/kube-prometheus-stack/Service-kube-prometheus-stack-valkey-metrics.yaml
@@ -3,7 +3,7 @@ kind: Service
 metadata:
  name: kube-prometheus-stack-valkey-metrics
  labels:
-    helm.sh/chart: valkey-0.9.3
+    helm.sh/chart: valkey-0.9.4
    app.kubernetes.io/name: valkey
    app.kubernetes.io/instance: kube-prometheus-stack
    app.kubernetes.io/version: "9.0.3"
--- a/Show More
+++ b/Show More